eweubr3289@gmail.com
eweubr3289@gmail.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and tayvano (lazarus-bluenoroff-research).
The earliest of those reports is dated 2026-08-30 and the most recent 2026-10-18.
The reporting files it under the persona Andy Cho, alongside 8 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
… #### Andy Cho / Anderson Lee - eweubr3289 - hashbirdcho - rango527 - eweubr3289@gmail.com - https://www.linkedin.com/in/andy-cho-6ba380309/ - https://t.me/hashbirdcho - https://t.me/rango527 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.
Related indicators
Same persona record: Andy Cho
Cited by the same report: lazarus.group/team/andy-cho
All 6 indicators from this source